NetSight
IP …
high7.8

CVE-2018-8822

Incorrect buffer length handling in the ncp_read_kernel function in fs/ncpfs/ncplib_kernel.c in the Linux kernel through 4.15.11, and in drivers/staging/ncpfs/…

Impact

Incorrect buffer length handling in the ncp_read_kernel function in fs/ncpfs/ncplib_kernel.c in the Linux kernel through 4.15.11, and in drivers/staging/ncpfs/ncplib_kernel.c in the Linux kernel 4.16-rc through 4.16-rc6, could be exploited by malicious NCPFS servers to crash the kernel or execute code.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.12 before 3.2.102
from 3.3 before 3.16.57
from 3.17 before 3.18.103
from 3.19 before 4.1.52
from 4.2 before 4.4.125
from 4.5 before 4.9.91
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 17.10
DebianDebian Linux
Versions 7.0, 8.0, 9.0

Weakness classification

CWE-119

References